old session keyring still on disk

[Kees Cook]

Binary package hint: gnome-keyring

While bug 539180 was fixed, the old gnome-keyring that was running for anyone with lucid devel will have still left a ~/.gnome2/keyrings/session.keyring (which is still loaded). A fixed gnome-keyring needs to delete the session.keyring from the disk as well as never save it.

[Martin Pitt (pitti)]

Note to self: We should add code to g-k startup which does this:

 if ~/.gnome2/keyrings/session.keyring exists:
     open it, overwrite with zeros, close
     unlink

We should keep this until shortly before lucid final.

[Martin Pitt (pitti)]

Proposed patch:

http://bazaar.launchpad.net/%7Eubuntu-desktop/gnome-keyring/ubuntu/annotate/head%3A/debian/patches/04_clean_session_keyring.patch

Kees, mind eyeballing it?

[Martin Pitt (pitti)]

I tested this both end-to-end (complete boot) as well as with creating fake session.keyring files and calling g-k-m manually. Works fine here, the file is zeroed and then removed.

Still awaiting signoff from Kees.

[Launchpad Janitor (janitor)]

This bug was fixed in the package gnome-keyring - 2.92.92git20100322-0ubuntu2

---------------
gnome-keyring (2.92.92git20100322-0ubuntu2) lucid; urgency=low

  * Add 04_clean_session_keyring.patch: Earlier versions of gnome-keyring
    (intra-lucid development) accidentally wrote the session keyring to disk.
    Clean it up on startup. This needs to be kept until after beta-2,
    preferably shortly before lucid final. (LP: #546446)
 -- Martin Pitt <email address hidden> Thu, 25 Mar 2010 18:09:08 +0100